https://9dok.net/document/zx5m036w-securing-names-with-dnssec.html